This vulnerability exists in the update_document, continue_document, delete_document, and get_content functions within app/routes/document.py of Axle-Bucamp MCP-Docusaurus up to commit 404bc028e15ec304c9a045528560f4b5f27a17e0. By manipulating the DOCS_DIR/path argument, an attacker can perform path traversal attacks, potentially accessing files outside the intended directory. The vulnerability is remotely exploitable without authentication and has a CVSS 4.0 base score of 6.9 (medium severity). The vendor has not yet issued a patch or official remediation guidance, and the rolling release model complicates version-specific identification.

Successful exploitation can lead to unauthorized access to files on the server hosting MCP-Docusaurus, potentially exposing sensitive information or enabling further attacks. The vulnerability is remotely exploitable without privileges or user interaction. Although the severity is medium, the public availability of exploit code increases the risk. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official project channels for updates. In the meantime, restricting access to the affected functions or implementing input validation to prevent path traversal may reduce risk.